$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa File: bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa (raw, json) Hash identifier: HGHXYXiyjQQOCxsWme/X5y7qy7uofQRJlhcZjCXn7fQ= Subject key identifier: F2:49:A5:07:A0:49:F0:E4:C6:53:2A:BD:70:3F:C7:67:60:98:FD:0E Certificate issuer: /CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Certificate serial: 010D0C9F4328584981D44BB814F30966C6777500 Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 32709 IP address blocks: 168.92.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:4b:b8:14:f3:09:66:c6:77:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=2d1de9a6-fbc5-46fe-b658-728f486392f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a3:49:26:7c:b9:44:d9:0a:36:ef:79:6b:cd: 5f:c8:e4:02:b7:c3:19:3a:b1:cb:40:e3:e7:2b:32: a5:17:76:31:a7:0a:bd:7b:cb:90:61:e2:fd:c7:a7: f7:17:75:06:4b:bc:b1:7f:18:20:b5:a8:3a:18:7c: 6b:f2:eb:7a:d4:c6:5d:1c:51:1f:24:79:0a:45:65: 23:3e:10:e0:a7:d5:d9:f9:72:dd:7c:7c:dc:1d:01: c7:9f:3a:3e:8e:31:c3:71:14:95:51:10:9c:db:e3: ff:72:f1:52:78:3d:63:6f:31:2b:cf:f6:b7:e1:0e: c8:fb:3b:fa:95:0b:1d:ca:db:ea:12:e3:b0:b4:24: 4a:2f:37:4a:89:62:33:4d:fa:ef:4d:d3:d0:aa:43: db:1e:4f:09:90:11:01:d6:42:d1:8c:33:9e:b2:7f: c3:9c:d6:49:f4:fb:db:09:dc:af:6c:7e:02:35:fe: 82:4b:c2:99:85:bd:28:ed:ef:56:e7:7f:4e:6a:b3: ab:25:65:5e:72:e1:c0:82:27:86:2a:43:9b:7c:73: 34:73:ad:98:7a:5e:6f:b2:36:c3:d8:36:a0:0c:be: 63:24:12:cd:0f:77:6f:ed:98:49:ba:51:80:48:44: 0c:8c:08:79:31:96:dc:a1:81:8f:bd:96:dd:e0:0a: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:A5:07:A0:49:F0:E4:C6:53:2A:BD:70:3F:C7:67:60:98:FD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl X509v3 Authority Key Identifier: keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer sbgp-ipAddrBlock: critical IPv4: 168.92.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:96:3a:05:29:88:71:49:41:aa:41:de:9e:b6:64:e8:34:a9: dc:8d:16:62:d0:12:02:28:6f:da:10:d3:97:59:9a:d6:82:26: 5f:74:38:02:b3:f5:35:41:2f:ca:5e:eb:7e:f1:8f:58:cd:7b: e1:f6:9e:06:6b:79:a3:bf:ae:ad:75:df:8e:99:ef:73:1e:b4: e4:fe:70:fe:2c:6e:5a:22:82:8e:8c:65:50:d3:b7:a3:22:0e: d1:ef:ab:4a:75:21:01:1e:37:5f:f6:06:db:df:f0:30:4a:62: f2:a2:20:20:f0:f7:1a:42:c2:a2:ec:b6:20:5e:99:e1:ed:12: 1f:51:e9:f2:47:79:c3:5a:c7:91:ee:7a:10:93:a1:e7:8f:94: 77:a1:a1:76:3d:23:b7:8f:f2:b5:38:5f:b8:77:da:83:78:9c: a7:d9:0a:4d:e4:39:1c:0d:fc:4c:2f:0a:e6:01:02:5c:56:9b: 41:ac:28:9d:72:69:31:2c:a1:ef:cf:b6:e5:8a:04:fd:e5:c8: b3:a5:10:8a:e9:5c:c8:b1:40:39:cf:32:22:b0:c7:6b:dd:39: de:ba:19:83:bb:a2:06:9d:68:a4:fa:de:78:eb:e4:c3:51:29: 14:34:dd:cf:ac:14:30:e0:20:a2:70:6f:9d:8c:d8:5f:29:56: 79:c4:c5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmB1Eu4FPMJZsZ3dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0 NDg2MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk MmQxZGU5YTYtZmJjNS00NmZlLWI2NTgtNzI4ZjQ4NjM5MmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aNJJny5RNkKNu95a81fyOQCt8MZOrHLQOPn KzKlF3Yxpwq9e8uQYeL9x6f3F3UGS7yxfxggtag6GHxr8ut61MZdHFEfJHkKRWUj PhDgp9XZ+XLdfHzcHQHHnzo+jjHDcRSVURCc2+P/cvFSeD1jbzErz/a34Q7I+zv6 lQsdytvqEuOwtCRKLzdKiWIzTfrvTdPQqkPbHk8JkBEB1kLRjDOesn/DnNZJ9Pvb CdyvbH4CNf6CS8KZhb0o7e9W539OarOrJWVecuHAgieGKkObfHM0c62Yel5vsjbD 2DagDL5jJBLND3dv7ZhJulGASEQMjAh5MZbcoYGPvZbd4Ao0fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJJpQegSfDkxlMqvXA/x2dgmP0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1 YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvYmZmYzIyN2MtMjM0OC0z NzI4LWJmZDEtY2Y0NDJlYzZjMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx OTFmYzQ0ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeWOgUpiHFJQapB3p62ZOg0qdyNFmLQEgIob9oQ05dZmtaCJl90OAKz 9TVBL8pe637xj1jNe+H2ngZreaO/rq11346Z73MetOT+cP4sbloigo6MZVDTt6Mi DtHvq0p1IQEeN1/2Btvf8DBKYvKiICDw9xpCwqLstiBemeHtEh9R6fJHecNax5Hu ehCToeePlHehoXY9I7eP8rU4X7h32oN4nKfZCk3kORwN/EwvCuYBAlxWm0GsKJ1y aTEsoe/PtuWKBP3lyLOlEIrpXMixQDnPMiKwx2vdOd66GYO7ogadaKT63njr5MNR KRQ03c+sFDDgIKJwb52M2F8pVnnExZY= -----END CERTIFICATE-----Generated at Mon Apr 28 10:35:50 2025 by rpki-client